Security researchers discovered a new variant of the PsiXBot modular malware with a new sextortion module and designed to use Google’s DNS over HTTPS (DoH) service to get command and control (C2) domain addresses. […]

from https://www.bleepingcomputer.com/news/security/psixbot-modular-malware-gets-new-sextortion-google-doh-upgrades/